Warning
This is a beta release, not meant for production use. Use it to test brand-new functionalities.
About this release
Configure exactly how users authenticate with multi-step MFA, including FIDO2 security keys. Administrators have full control over MFA flows for each location, with stronger authentication options for high-security environments.
Users can now configure their Multi-Factor Authentication (MFA) factors directly in the desktop application at any time, even after enrolment. Admins can enforce stronger security without disrupting access, while users manage their authentication seamlessly.
The mobile client has also been redesigned, joining the rest of the refreshed Defguard family.
✨ What's new
- Multi-step configurable MFA methods
- Use FIDO2 hardware key as MFA factor - add it as a passkey in your profile, configure an MFA Flow with FIDO2 Security Key factor, assign it to your location and connect using the latest Desktop Client.
- Post-enrolment MFA configuration
- Bulk actions for Firewall module
- Handling multiple locations with DNS configuration connected simultaneously
- Ability to apply custom MTU to the client apps
- Allow configuring WireGuard interface metric on Windows
- Bulk action to put enrolment token in Active Directory for the auto-provisioning process
- Completely redesigned Mobile Client - try it out by joining our beta channels or by installing packages from the release assets (more details in the mobile release).
|
🧪 How to test
🚀 Quickly run the latest server components using one-line-script in pre-release mode.
🔄 Worried that your users have to upgrade the client applications? Here you can check the client vs server feature compatibility matrix.
🙋 Feedback
We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues
Full changelog
- update proto submodule by @wojcik91 in #372
- add step-start route for multi-step MFA flows by @wojcik91 in #382
- Stable to dev by @moubctez in #394
- Fido2 by @moubctez in #395
- FIDO2 take2 by @moubctez in #396
- handle remote-auth methods in multi-step MFA flows by @wojcik91 in #397
- Configure MFA methods on demand via client by @t-aleksander in #398
- fix trivy by @filipslezaklab in #400
- Client MTU by @moubctez in #401
- register fido2 via client by @filipslezaklab in #402
- Add RPC to end an mfa configuration session by @t-aleksander in #399
- Release automation attempt by @t-aleksander in #403
- Authorize configure factor via oidc,fido2 by @filipslezaklab in #408
- Display OIDC provider icon/name on enrollment site by @jakub-tldr in #410
- Update proto by @filipslezaklab in #412
- Bump proto by @jakub-tldr in #415
- add dedicated MFA flow routes by @wojcik91 in #414
- Bump defguard UI by @t-aleksander in #417
- Fix frontend building pipeline by @t-aleksander in #418
Full Changelog: v2.1.0...v2.2.0-beta1